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CLAIMS 

What is claimed is: 

[cl] 1. A method for distributing and processing an application, comprising the steps of: 
receiving the application and identification information; 
certifying the application satisfies a predetermined criterion; 
assigning a permission to the application; 

transmitting the application, the permission and the identification information to 
the a device using a modification detection technique; 

determining whether the application was modified during transmission; 
storing a rule on the device; 
: determining if the application may be process using the permission and the rule; 

■- and 

= removing the application from the device. 

[c2] 2. The method of claim 1 further comprising the steps of: 
initiating the execution of the application on the device; 
monitoring the execution of the application; and 
detecting the application attempting to make an improper operation. 

[c3] 3. The method of claim 1 , wherein the application is denied permission to be 
processed on the device. 

[c4] 4. The method of claim 1, wherein the identification information is retrieved by the 
device. 

[c5] 5. The method of claim 1 further comprising the step of detecting a modification in 
the application. 

[c6] 6. The method of claim 1 further comprising the step of detecting a modification in 
the permission. 
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[c7] 7. The method of claim 1, wherein the modification detection technique uses a 
digital signature. 

[c8] 8. A method for distributing and processing an application, comprising the steps of: 
receiving the application and identification information; 
certifying the application satisfies a predetermined criterion; 
assigning a permission to the application; 

transmitting the application, the permission and the identification information to 
the a wireless device; 

storing a rule on the device; and 
H determining if the application may be processed on the device using the 

permission and the rule. 

£c9] 9. The method of claim 8 further comprising the steps of: 

initiating the execution of the application on the wireless device; 
'" : monitoring the execution of the application; 

j detecting the application attempting to make an improper operation; and 

removing the application from the wireless device. 

[clO] 10. The method of claim 8, wherein the application was denied permission to be 
processed on the wireless device and further comprising the step of removing the 
application from the device. 

[cl 1] 11. The method of claim 8, wherein the identification information is determined by 
the wireless device. 

[cl2] 12. The method of claim 8, wherein a modification detection technique is used to 
transmit the application, the permission and the identification information. 
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[cl3] 13. The method of claim 12, wherein the modification detection technique uses a 
digital signature. 

[cl4] 14. The method of claim 12 further comprising the steps of: 

detecting a modification in the application transmitted to the device; and 
removing the application from the device. 

[cl5] 15. The method of claim 12 further comprising the steps of: 

detecting a modification in the permission transmitted to the device; and 
removing the application from the device. 

fcl6] 16. A method for distributing and processing an application, comprising the steps of: 
- c receiving the application and identification information; 

assigning a permission to the application; 
7[ transmitting the application, the permission and the identification information to 

='} the a device using a modification detection technique; 

=i determining whether the application was modified during transmission; 

storing a rule on the device; 

determining if the application may be process using the permission and the rule; 



and 



removing the application from the device. 



[cl7] 17. The method of claim 16 further comprising the steps of: 

initiating the execution of the application on the wireless device; 
monitoring the execution of the application; 

detecting the application attempting to make an improper operation; and 
removing the application from the wireless device. 

[cl8] 18. The method of claim 16, wherein the application was denied permission to be 
processed on the wireless device and further comprising the step of removing the 
application from the device. 
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[cl9] 19. The method of claim 16, wherein the identification information is determined by 
the wireless device. 

[c20] 20. The method of claim 16, wherein a modification detection technique is used to 
transmit the application, the permission and the identification information. 

[c21] 21. The method of claim 20, wherein the modification detection technique uses a 
digital signature. 

[c22] 22. The method of claim 20 further comprising the steps of: 
1 =:f detecting a modification in the application transmitted to the device; and 

MI removing the application from the device; 

;fe23] 23. The method of claim 12 further comprising the steps of: 
ui detecting a modification in the permission transmitted to the device; and 

removing the application from the device. 

p24] 24. A system for distributing an executing an application on a wireless device, 
^ comprising: 

a central server operable to receive the application and developer identification, to 
assign a permission associated with the application and to transmit the application 
information to the wireless device; 

a server operable to certify the application satisfies a predefined criterion; and 
the wireless device operable to receive the application and developer 
identification, and to evaluate the assigned permission. 

[c25] 25. The system of claim 24, wherein the central server is further operable to transmit 
the application to the wireless device using a modification detection technique. 
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[c26] 26. The system of claim 24, wherein the central server is further operable to transmit 
the permission to the wireless device using a modification detection technique. 

[c27] 27. The system of claim 24, wherein the server is operable to certify the application is 
the central server. 

[c28] 28. The system of claim 24, wherein the wireless device is operable to evaluate the 
assigned permission using a rule stored in the wireless device. 

[c29] 29. A system for distributing and executing an application on a wireless device, 
comprising: 

:f means for receiving the application and identification information; 

!^ means for assigning a permission to the application; 

v means for transmitting the application, the permission and the identification 

information to the device using a modification detection technique; 

means for determining whether the application was modified during transmission; 
=- means for storing a rule on the device; 

; means for determining if the application may be process using the permission and 

the rule; and 

means for removing the application from the device. 

[c30] 30. A method of processing application distribution, comprising the steps of: 
receiving the application and identification information; 
certifying the application satisfies a predetermined criterion; 
assigning a permission to the application; 

transmitting the application, the permission and the identification information to 
the device using a modification detection technique; and 

initiating a request to remove the application from a device. 
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[c3 1] 31. The method of claim 30, further comprising the step of: 

evaluating the received application and identification information to determine the 
identity of a developer of the application. 

[c32] 32. The method of claim 30, wherein the modification detection technique uses a 
digital signature. 

[c33] 33. A method of processing application distribution, comprising the steps of: 
receiving the application and identification information; 
assigning a permission to the application; and 

transmitting the application, the permission and the identification information to 
the device using a modification detection technique. 

[c34] 34. The method of claim 33 further comprising the step of initiating a request to 
remove the application from a device. 

[c35] 35 The method of claim 33 further comprising the step of certifying the application 
satisfies a predetermined criterion. 

tc36] 36. The method of claim 33, further comprising the step of: 

evaluating the received application and identification information to determine the 
identity of a developer of the application. 

[c37] 37. The method of claim 33, wherein the modification detection technique uses a 
digital signature. 

[c38] 38. A system for application distribution, comprising: 

a central server operable to receive application and identity information, assign a 
permission, and transmit the application using a modification detection technique; and 
a network connected to the central server to receive the application. 
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[c39] 39. The system of claim 38, wherein the central server is further operable to certify 
the application satisfies a predefined criterion. 

[c40] 40. A system for application distribution, comprising: 

means for receiving the application and identification information; 
means for certifying the application satisfies a predetermined criterion; 
means for assigning a permission to the application; and 
means for transmitting the application, the permission and the identification 
information to the device using a modification detection technique. 

[c41] 41. A computer-readable medium containing computer-executable instructions for 
=j distributing applications, comprising the steps of: 
- receiving the application and identification information; 

y certifying the application satisfies a predetermined criterion; 

assigning a permission to the application; and 

transmitting the application, the permission and the identification information to 
-- : the device using a modification detection technique. 

Xc42] 42. A method for executing an application on a wireless device, comprising the steps 
I of: 

storing a rule to evaluate a permission; 

receiving information comprising the application, the permission and an 
identification using a modification detection technique; 

receiving a request to execute the application on the wireless device; 

evaluating the received information to determine if the received information was 
modified; 

in the event the received information was not modified, evaluating the permission 
associated with the application; and 

in the event the permission is granted, executing the application. 
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[c43] 43. The method of claim 42, wherein the modification detection technique uses a 
digital signature. 

[c44] 44. The method of claim 42 further comprising the step of monitoring the execution 
of the application to determine if an improper operation is attempted. 

[c45] 45. The method of claim 42 further comprising the step of removing the application 
from the wireless device. 

[c46] 46. A method for executing an application on a wireless device, comprising the steps 
of: 

storing a rule to evaluate a permission; 

receiving information comprising the application, the permission and an 

identification using a modification detection technique; 
" receiving a request to execute the application on the wireless device; and 

evaluating the permission associated with an application; and 
in the event the information was modified, removing the application from the 

wireless device. 

[c47] 47. The method of claim 46, further comprising the steps of: 

in the event the received information was not modified, evaluating the permission 
associated with the application; and 

in the event the permission is granted, executing the application. 

[c48] 48. The method of claim 46, wherein the modification detection technique uses a 
digital signature. 

[c49] 49. The method of claim 46 further comprising the step of monitoring the execution 
of the application to determine if an improper operation is attempted. 
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[c50] 50. The method of claim 46 further comprising the step of removing the application 
from the wireless device in the event the improper operation is attempted. 

[c5 1] 51. A wireless device for executing an application, comprising: 

a input to receive an application and a permission; 

a rule contained in storage to evaluate the permission; and 

a key contained in storage to evaluate a digital signature, 
wherein the wireless device is operable to execute the application upon evaluation of the 
permission and digital signature. 

[c52] 52. A wireless device for executing an application, comprising: 
means for storing a rule to evaluate a permission; 

means for receiving information comprising the application, the permission and 
i an identification using a modification detection technique; 

:= means for receiving a request to execute the application on the wireless device; 

means for evaluating the received information to determine if the received 
information was modified; 
t means for, in the event the received information was not modified, evaluating the 

^ permission associated with the application; and 

means for, in the event the permission is granted, executing the application. 

[c53] 53. A computer-readable medium containing computer-executable instructions for 
distributing applications, comprising the steps of: 
storing a rule to evaluate a permission; 

receiving information comprising the application, the permission and an 
identification using a modification detection technique; 

receiving a request to execute the application on the wireless device; 

evaluating the received information to determine if the received information was 
modified; 

in the event the received information was not modified, evaluating the permission 
associated with the application; and 

in the event the permission is granted, executing the application. 
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